This page explains what personal data passes through this site, why, and with what safeguards. The data controller is Albergo Cristallo s.r.l., Via Provinciale 75, 21033 Cittiglio (VA), VAT no. 01961160122. For any question about your data you can write to info@albergocristallo.com or call +39 0332 601336: the family answers, not an outside supplier.
What data we process
Data you send us through the forms. The site has no registration and no newsletter. When you fill in a request form, we receive the data you type in yourself: full name, email, phone, the dates, the number of guests, the type of request and the message.
Technical browsing data. The systems that host the site record some minimal technical data, such as the IP address and page requests, needed to run and protect the service.
Usage statistics, only with your consent. If you accept them from the banner, we use Google Analytics 4 to understand in aggregate form how the site is used: which pages are visited, from what kind of device, from which approximate geographic area. The tool uses identifiers stored in cookies and technical data from the device; the IP address is used only to estimate the area you are visiting from and is not recorded. We do not link these statistics to names or contact details, we do not use them for advertising and we do no profiling.
Why we use it and on what basis
The data from the forms serves one purpose only: reading your request and replying, and if it comes to it, arranging the stay, the table or the celebration you are asking us about. The legal basis is taking steps at your request before a possible contract (Article 6(1)(b) of the GDPR).
Technical browsing data rests on our legitimate interest in running and protecting the site (point f).
Usage statistics rest solely on your consent (point a), which you can refuse or withdraw at any time on the cookies page, with no consequence for your use of the site.
How long we keep it
Messages from the forms are kept for as long as it takes to handle the request and any booking that follows, then they remain in the hotel’s normal email correspondence. Google Analytics statistics are kept for 14 months at most, after which they are deleted automatically. Technical logs follow the hosting provider’s standard retention times.
Who can see it
Requests go straight to the family, who answer in person. To run the site we rely on providers that process data on our behalf, as data processors:
- Web3Forms, which delivers the form messages to our email;
- Cloudflare, which hosts the site and protects it;
- Google Ireland Limited, which provides Google Analytics, only if you have consented to the statistics.
None of these providers uses your data for marketing purposes of its own, and we do not pass your data on to third parties.
Transfers outside the European Union
Some providers may also process data in the United States. In that case the transfer takes place with the safeguards provided by the GDPR: the European Commission adequacy decision known as the EU-US Data Privacy Framework, for the providers that adhere to it, and in addition the standard contractual clauses approved by the Commission.
WhatsApp and phone
If you write to us on WhatsApp or call us, the processing takes place on those channels: for WhatsApp, the terms and privacy notice of the service itself also apply.
Your rights
You can ask us at any time to access your data, correct it, delete it, restrict its use or object to the processing, by writing to info@albergocristallo.com. Where the processing rests on consent, you can withdraw it whenever you want. You also have the right to lodge a complaint with the Italian data protection authority, the Garante per la protezione dei dati personali (www.garanteprivacy.it).
Updates
This notice may change if the tools behind the site change: the version in force is always the one you find here.
Last updated: August 2026.